Remove Windows Protection Suite. Description and removal instructions

 
Title: Windows Protection Suite
Also known as: WindowsProtection Suite, WindowsProtectionSuite, Windows ProtectionSuite
Type: Spyware
Severity scale:Windows Protection Suite severity is 68  (68 / 100)
 
Windows Protection Suite is a misleading anti-virus application that uses false scan results and fake security alerts to make you think your computer is infected with spyware, Trojans and other malware. The rogue program provides exaggerated scan results and then suggests buying a full version of this fake program to remove non-existing system security threats. Windows Protection Suite is from the same family as Windows Security Suite, Malware Destructor 2009, Virus Shield 2009, Extra Antivirus, Virus Sweeper, Virus Doctor, Virus Melt.

Windows Protection Suite is promoted through the use of Trojan viruses and fake online anti-malware scanners. The security threat can be also downloaded and installed manually from its homepage windowsprotectionsuite.com. Once installed, this parasite will be configured to scan your computer automatically each time you log on into Windows. WindowsProtection Suite will report a variety of infections and privacy issues ans state that you must purchase the program in order to fix those problems. What is more, it will constantly display legitimately looking security alerts from Windows task bar. The misleading program will also impersonate Windows Security center. It may display security warnings and notifications about unprotected computer and possible attacks from a remote machine. Fake notification from Windows task bar reads:

"System Alert
malicious applications, which can contain trojans, were found on your PC and need to be immediately removed. Click here to remove these potentially harmful items using Windows Protection Suite"

While running, WindowsProtectionSuite will dramatically decrease system performance. Likely it will delete system restore points and block all found security applications. To make things worse, Windows Protection Suite will hijack Internet browsers and search results. If you wind that your computer is infected with this bogus software, please use the manual removal guide below to remove Windows Protection Suite from the system for free.


Related files: DBOLE.sys, CLSV.tmp, cid.tmp, cb.sys, Instructions.ini, cookies.sqlite, winps.cfg, vd952342.bd, working.log, WINPS.ico, ddv.dll, CLSV.dll, cid.dll, sqlite3.dll, mozcrt19.dll, ppal.exe, WindowsProtectionSuite.exe, std.exe, snl2w.exe, Windows Protection Suite.exe, Uninstall.exe, WI345d.exe, CLSV.exe, ANTIGEN.drv, DBOLE.drv, dudl.sys, energy.dll, grid.dll, grid.sys, kernel32.dll, tempdoc.dll, PE.dll, PE.tmp, runddl.dll, sm.dll

Windows Protection Suite properties:
• Changes browser settings
• Shows commercial adverts
• Stays resident in background

Windows Protection Suite snapshot:
Windows Protection Suite removal

Automatic Windows Protection Suite removal:

remover for Windows Protection Suite

Windows Protection Suite manual removal:

Kill processes:
snl2w.exe std.exe WindowsProtectionSuite.exe WI345d.exe ppal.exe uninstall.exe WI345d.exe CLSV.exe
Delete registry values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “WindowsProtectionSuite”
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\WI345d.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "9877034603"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Protection Suite"
Unregister DLLs:
energy.dll grid.dll kernel32.dll tempdoc.dll PE.dll runddl.dll SM.dll mozcrt19.dll sqlite3.dll cid.dll CLSV.dll ddv.dll

Delete files:
WI345d.exe CLSV.exe snl2w.exe std.exe WindowsProtectionSuite.exe WI345d.exe ppal.exe tempdoc.dll energy.dll mozcrt19.dll sqlite3.dll cid.dll CLSV.dll ddv.dll tempdoc.dll WINPS.ico working.log vd952342.bd winps.cfg cookies.sqlite Instructions.ini cb.sys cid.tmp CLSV.tmp DBOLE.sys
Delete directories:
%UserProfile%\Application Data\Windows Protection Suite

Other programs to remove Windows Protection Suite:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 12/08/09
Information updated: 30/10/09

Additional resources related to Windows Protection Suite:

Attention: If you know or you have a website or page about Windows Protection Suite removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Windows Protection Suite parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by . 2009-10-30 04:10:25
Help Me.... Help Mee........
Please tell me how to uninstall windows protection suite from my pc?????????

2. by . 2009-10-10 22:10:50
i cant really believe that mah cpu has a virus when there is no virus and my Avira has stopped working when d day has come that windows protection suite has taken over!!!!!!!!


PLS. HELP tell me how can i get my avira work back and how 2 remove dis windows protection suite

3. by . 2009-10-01 08:10:25
" 3. by . 2009-09-13 10:09:53
get a mac and you won't have to worry about this stuff, idiots "

IF YOU DONT HAVE ANYTHKNG NICE TO SAY....BUT OUT...PEOPLE ON HERE ARE ACTUALLY TRYING TO HELP OTHER PEOPLE....YOUR THE IDIOT...

4. by . 2009-09-15 10:09:20
I was cursed by this Windows Protection Suite virus on9-13-09. I purchased Spyware Doctor, was e-mailed a registration number, tried to register it only to be told the registration number was invalid!!! NOW what do I do?

5. by ameena. 2009-09-13 11:09:14
right click on windows protection suite icon, note the address of target file,using MSDOS delete the directory in which the target file is kept.Delete it from recycle bin also and this virus is gone.
anyone having basic knowledge of dos commands can do it

6. by . 2009-09-13 10:09:53
get a mac and you won't have to worry about this stuff, idiots

7. by me. 2009-09-12 10:09:13
yeah i was shocked know that my notebook was infected by some viruses, and Trojans...

8. by . 2009-09-10 10:09:46
its fake????

9. by . 2009-09-07 08:09:37
thanks more

10. by . 2009-09-07 08:09:30
123456

11. by . 2009-09-07 08:09:04
thank you

12. by . 2009-08-31 20:08:25
Thed team of microsoft removed mine. I have live onecare and the remote help took care of it!

13. by . 2009-08-31 20:08:46
I have windows live onecare and i had the windows protection suite. I tried everything but because i had live onecare i did the live chat and microsoft removed it remotly. It took 2 hours to get it all out but they did it all.! I recommend this software to anyone!!!

14. by . 2009-08-31 14:08:21
I can't seem to get it off of my computer either!! Windows xp & I downloaded malwarebytes still there.HELP!!!!!

15. by . 2009-08-26 12:08:26
delete all this parasite fake antivirus

16. by . 2009-08-24 22:08:28
Use Windows defender in vista. It removed it on me friends laptop with a quick scan.

17. by . 2009-08-20 23:08:08
Download Process Explorer from

technet.microsoft.com/en-us/sysinternals/bb896653.aspx

Rename Procexp.exe to iexplore.exe and run the program. Find Windows Protection Suite Processes and terminate them. Then run Spyware Doctor again.

18. by Rod. 2009-08-20 12:08:49
I am unable to remove windows protection suite, even with Spyware Doctor. What now???

19. by . 2009-08-19 13:08:47
Spyware Doctor could not remove windows protection suite from my computer. Instead my Internet explorer has stopped working.
ken

20. by . 2009-08-16 16:08:58
vknbifjinzxckbniozcxnbnih

See more comments about Windows Protection Suite >>>
Latest spyware news:
Similar parasites:
Related discussions: